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IN THE CLAIMS: 

Please amend claims 30 and 33 as follows: 
Claims 1-29 (canceled) 

1 Claim 30. (currently amended) A security system comprising: 

2 an activation token identifying system characteristics and 

3 specifying a threat level and at least one preset activation measure^ 

4 wherein a system characteristic is one of the group of a hardware 

5 system, a service, a configuration of a service, a service execution 

6 platform, and a service version ; 

7 a first system configured to at least review security and 

8 vulnerability information form from information publishers and to 

9 provide the activation token based on the security and vulnerability 

10 information; and 

11 a second system configured to determine whether the activation 

12 token is relevant by checking if actual characteristics at the second 

13 system correspond to the system characteristics identified by the 

14 activation token, the second system further configured to transform the 

15 activation token into at least one activation measure if the activation 

16 token is considered relevant by the second system, the activation 

17 measure configured to modify services executing at the second system. 

1 Claim 31. (previously presented) The system of claim 30, further 

2 comprising a cryptographic means configured to verify at the second 

3 system that the first system is a trusted service. 

1 Claim 32. (previously presented) The system of claim 30, further 

2 comprising a reporting means configured to report to a system 

3 administrator of the second system any activation measures taken by the 

4 second system. 

1 Claim 33. (currently amended) The system of claim 30, wherein 

2 the first system is further configured to automatically filter the 

3 security and vulnerability information relevant to the system 

4 characteristics identified by the activation token . 

1 Claim 34. (previously presented) The system of claim 30, further 

2 comprising a list of trusted service providers from whom activation 

3 tokens are accepted by the second system. 
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1 Claim 35. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is shutting down a service 

3 affected by the specified threat level. 

1 Claim 36. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is reconfiguring the 

3 functionality of a service affected by the specified threat level. 

1 Claim 37. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is installing a patch for a 

3 service affected by the specified threat level. 

1 Claim 38. (previously presented) The system of claim 30, wherein 

2 the at least one preset activation measure is alerting a system 

3 administrator. 
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